Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
File: AhEzU3DZK25zPjim_oPxkgvIY7U.cer (raw, json)
Hash identifier: OVRtl4cdauJVhLkBkya/nubQOmLhQfLaS9Y4y4FDvj4=
Subject key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0AADB51BC315383BE2BC5980D1253FF75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 16 Sep 2026 15:34:55 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60666
IP: 152.234.128.0/19
IP: 177.177.64.0/19
IP: 177.201.192.0/19
IP: 179.69.64.0/18
IP: 179.253.32.0/19
IP: 179.254.192.0/19
IP: 187.5.0.0/20
IP: 187.14.128.0/18
IP: 187.15.192.0/18
IP: 187.55.0.0/18
IP: 189.12.128.0/18
IP: 189.30.64.0/18
IP: 189.31.0.0/19
IP: 189.73.32.0/20
IP: 191.0.80.0/20
IP: 191.45.32.0/20
IP: 200.138.16.0 -- 200.138.47.255
IP: 200.141.48.0/20
IP: 200.141.176.0/20
IP: 200.149.176.0/20
IP: 200.180.160.0/19
IP: 201.24.224.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:db:51:bc:31:53:83:be:2b:c5:98:0d:12:53:ff:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 16 15:34:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:65:d8:a4:2b:1f:88:46:74:f1:fa:db:38:58:
b8:48:c3:78:95:50:db:c3:7f:81:fc:31:a0:d9:0f:
6b:58:a3:17:1c:e0:fd:b4:5a:76:69:09:a3:fa:35:
9d:87:7b:96:5f:d7:8c:f4:92:0c:7d:0b:16:aa:62:
43:af:27:27:31:89:05:bc:59:02:ec:d4:3f:61:63:
b9:89:31:ad:3d:0d:91:17:47:74:8e:9c:8c:bc:45:
b5:ca:8a:ce:67:f9:95:54:f0:0c:3c:2b:6e:45:a0:
26:08:be:6c:86:ca:18:2a:3d:f3:9a:2a:19:d4:e8:
a4:43:70:66:d2:7c:05:5e:dd:22:95:fa:a1:2f:1e:
a3:bd:41:ec:20:3d:a4:4f:19:44:bd:fa:cf:b1:11:
ae:d7:fa:7d:95:c5:49:6c:a1:9a:99:b3:af:d0:aa:
ed:d1:43:c6:42:0e:46:fa:1e:4c:13:36:47:28:17:
fe:62:2a:e5:ce:9e:d8:2a:0d:89:b2:84:8f:b2:47:
5b:d0:34:ed:3c:93:27:ee:7a:d4:90:e4:19:f8:c1:
3c:27:84:9e:2d:99:0c:42:d6:ac:46:c9:5c:53:06:
75:60:da:7f:4b:fb:10:f6:63:bb:5b:d0:18:df:d8:
8a:7f:b7:93:85:50:72:77:bb:e4:15:46:a2:70:a5:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.128.0/19
177.177.64.0/19
177.201.192.0/19
179.69.64.0/18
179.253.32.0/19
179.254.192.0/19
187.5.0.0/20
187.14.128.0/18
187.15.192.0/18
187.55.0.0/18
189.12.128.0/18
189.30.64.0/18
189.31.0.0/19
189.73.32.0/20
191.0.80.0/20
191.45.32.0/20
200.138.16.0-200.138.47.255
200.141.48.0/20
200.141.176.0/20
200.149.176.0/20
200.180.160.0/19
201.24.224.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60666
Signature Algorithm: sha256WithRSAEncryption
a6:01:1b:b7:70:d6:21:15:c0:cd:70:5f:5e:48:ea:05:c0:cd:
92:17:a1:66:02:c5:32:3b:e0:08:1b:d6:e1:d3:a7:8e:89:e9:
e2:5e:24:b4:23:52:25:dd:46:c7:ef:b3:0a:9b:6e:b3:71:22:
46:16:6b:0b:83:4f:b8:19:79:f7:58:58:fa:71:59:29:5d:2b:
5b:a9:6c:7b:7f:e5:10:7f:1f:8f:17:8a:6a:3c:74:ae:00:10:
d5:13:24:c0:a9:57:9f:78:5b:e2:f9:21:f0:31:1f:3d:8a:38:
da:50:46:8c:cb:b2:9e:0f:d4:29:4f:2d:f8:a2:9c:19:4c:5a:
c2:c1:ec:49:5f:de:76:e2:2a:3e:01:45:ab:eb:ae:90:b9:8c:
c9:40:97:e6:d4:6a:ce:13:7e:51:44:16:8c:59:3d:43:27:5c:
44:97:8f:03:32:b8:b4:71:cd:6b:cc:fb:60:35:22:b2:ad:4a:
d5:af:9f:97:44:e1:ad:55:9e:cd:7a:58:48:41:98:40:4d:8a:
d2:fa:d2:de:f9:46:44:46:fc:e3:cb:7f:6a:94:ff:f0:bd:26:
0a:6a:6f:8c:1f:97:92:e8:3f:6f:fe:f2:1c:0c:f8:62:3a:1d:
c5:43:a9:4a:7e:5c:d7:c2:da:b4:9c:a8:38:48:de:c2:05:ea:
ee:26:10:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:55:18 2026 by rpki-client